Directus versions before 11.16.0 are vulnerable to Server-Side Request Forgery (SSRF) due to a bypass in IP address validation using IPv4-Mapped IPv6 addresses, allowing attackers to access internal services and sensitive cloud metadata.
Directus <= 12.0.0
ssrf
directus
vulnerability
2r
1t
3i
updated